Solved Driverstore explorer, safe to delete old drivers?

antspants · Dec 18, 2024

andrew129260 said:
Happy days

Wolfzz · Jan 17, 2025

DriverStore Explorer 0.11.114

GitHub - lostindark/DriverStoreExplorer: Driver Store Explorer [RAPR]

Driver Store Explorer [RAPR]. Contribute to lostindark/DriverStoreExplorer development by creating an account on GitHub.

github.com

Winuser · Jan 17, 2025

pseymour said:
In addition to what garlin said, there is also a case to be made for removing drivers you’re not using to reduce the risk of a BYOVD attack. I know, I know, home users never get attacked, but they do generally run as administrator, making it super easy for a nefarious person to load an old, vulnerable driver that is just sitting on the drive. If the driver were not there, you wouldn’t be vulnerable to it.

I know this was posted back in Dec. but this is the first time I read the whole thread. I never heard of BYOVD attack. How does the driver get infected or is this something that must be mistakenly downloaded? I just backed up all of my drivers on my two desktops to Onedrive and then deleted all but one of my old drivers using DriverStore Explorer. The one I didn't delete was one that I would have had to force delete. I left it alone because was listed as still running.

andrew129260 · Jan 17, 2025

Winuser said:
I know this was posted back in Dec. but this is the first time I read the whole thread. I never heard of BYOVD attack. How does the driver get infected or is this something that must be mistakenly downloaded? I just backed up all of my drivers on my two desktops to Onedrive and then deleted all but one of my old drivers using DriverStore Explorer. The one I didn't delete was one that I would have had to force delete. I left it alone because was listed as still running.

Not to just give you a link, but this explains it well.

What are BYOVD Attacks? - Cymulate

BYOVD (Bring Your Own Vulnerable Driver) attacks exploit vulnerabilities in device drivers to compromise a system.

cymulate.com

You saw how crowdstrike wrecked things.......similar as to whats possible

hdmi · Jan 17, 2025

andrew129260 said:
Not to just give you a link, but this explains it well.

What are BYOVD Attacks? - Cymulate

BYOVD (Bring Your Own Vulnerable Driver) attacks exploit vulnerabilities in device drivers to compromise a system.

cymulate.com

You saw how crowdstrike wrecked things.......similar as to whats possible

Forget BYOVD attacks. EDRSandBlast-GodFault bypasses Microsoft's vulnerable driver blocklist by, in lieu of attempting to exploit vulnerable drivers,, exploiting an admin-to-kernel vulnerability that AFAIK still hasn't been fixed yet. Forget vulnerable drivers - Admin is all you need — Elastic Security Labs

POC (Proof of Concept) :

GitHub - gabriellandau/EDRSandblast-GodFault: EDRSandblast-GodFault

EDRSandblast-GodFault. Contribute to gabriellandau/EDRSandblast-GodFault development by creating an account on GitHub.

github.com

andrew129260 · Jan 17, 2025

hdmi said:
Forget BYOVD attacks. EDRSandBlast-GodFault bypasses Microsoft's vulnerable driver blocklist by, in lieu of attempting to exploit vulnerable drivers,, exploiting an admin-to-kernel vulnerability that AFAIK still hasn't been fixed yet. Forget vulnerable drivers - Admin is all you need — Elastic Security Labs

POC (Proof of Concept) :

GitHub - gabriellandau/EDRSandblast-GodFault: EDRSandblast-GodFault

EDRSandblast-GodFault. Contribute to gabriellandau/EDRSandblast-GodFault development by creating an account on GitHub.

github.com

There's always something.....

thanks looks like a good read

Also, one of the avast antivirus drivers semi recently was used as a way to push malware and deploy it to devices.

Hackers abuse Avast anti-rootkit driver to disable defenses

A new malicious campaign is using a legitimate but old and vulnerable Avast Anti-Rootkit driver to evade detection and take control of the target system by disabling security components.

www.bleepingcomputer.com

hdmi · Jan 17, 2025

andrew129260 said:
There's always something.....

thanks looks like a good read

The short version of the story is that Windows Security is, and always has been, an oxymoron. It immediately helps to explain why nothing of what I do for work as an Enterprise Java software developer ever comes in contact with Windows.

andrew129260 · Jan 17, 2025

hdmi said:
The short version of the story is that Windows Security is, and always has been, an oxymoron. It immediately helps to explain why nothing of what I do for work as an Enterprise Java software developer ever comes in contact with Windows.

I personally believe considering how vast and compatible windows is, it's surprisingly decent security wise. Windows 11 ruffles a lot of feathers for some people already. I would like to see microsoft going further into this path, and start getting rid of really old legacy items so security can be better maintained and enforced. The older windows OS still exist for the companies needing it to control older needed equipment, but modern systems on the internet should have tighter restrictions.

Linux, Mac os, and chrome OS were built from the ground up to attempt to be secure, with security as the foundation. Windows never had that luxury.

Microsoft has made a lot of strides in security, but they have a long way to go.

I still personally believe most home users should be using any other operating system other than windows. I like chromebooks for the average user.

It is what it is.

hdmi · Jan 17, 2025

andrew129260 said:
I personally believe considering how vast and compatible windows is, it's surprisingly decent security wise. Windows 11 ruffles a lot of feathers for some people already. I would like to see microsoft going further into this path, and start getting rid of really old legacy items so security can be better maintained and enforced. The older windows OS still exist for the companies needing it to control older needed equipment, but modern systems on the internet should have tighter restrictions.

Linux, Mac os, and chrome OS were built from the ground up to attempt to be secure, with security as the foundation. Windows never had that luxury.

Microsoft has made a lot of strides in security, but they have a long way to go.

I still personally believe most home users should be using any other operating system other than windows. I like chromebooks for the average user.

It is what it is.

On Windows, security is like leaving the key under the doormat. The improvements are that duct tape was used to tape the doormat firmly to the floor of your porch. This makes it harder for the intruders to lift up the doormat. The reality is that you still need to keep standing with both feet on the doormat 24/7 if you want it to be safe. The only real reason why Windows Security has come a long way is because it used to be like this:

https://i.gifer.com/8XM.gif

Winuser · Jan 17, 2025

andrew129260 said:
There's always something.....

It's a damn shame they don't put their programming skills to good use instead of trying to RIP everyone off.

Solved Driverstore explorer, safe to delete old drivers?

Like a rolling drone.

My Computers

Well-known member

DriverStore Explorer 0.11.114​

My Computer

Well-known member

My Computers

Well-known member

My Computers

Jack of all trades – master of none

My Computers

Well-known member

My Computers

Jack of all trades – master of none

My Computers

Well-known member

My Computers

Jack of all trades – master of none

My Computers

Well-known member

My Computers

Similar threads

DriverStore Explorer 0.11.114